UPDATE: True Blue ELF Dumper & Source Code Released

[sealhealy]

'Originally Posted by PatrickBatman @ PS3crunch'

Yeah guys, I talked to "someone" about it a few hours ago, what is happening is that libsysutil_np_trophy.sprx loads everytime an app is launched (like multiman), thus when trying to swap this file from multiman filemanager you cant, because it's in use.

maybe when trying to grab the dumps either by going back into multiman or using an FTP server new dumps are being created and overwriting the one from the game.

[BahumatLord]

I don't think so because if you leave them where they are and keep loading different apps new ones are created with higher numbers. I know that deank doesn't own a TB and it's looking like the original poster doesn't own one either. It looks like he just installed the 3.55 firmware to test with but the security is in the dongle itself

[ahou]

I tried dean's version on 4.11 dex, still no go.

[propJOE]

deank's revision only works without the TB dongle inserted. It's a shame because it's a much improved dumper. Great for non-tb use but since we're trying to get these tb games patched it's best to stick with the original for now until deank gets a chance to update

I'm hearing crickets out there - nobody else is trying to dump anything?

Exactly!!! You all thigthen your as*es.
Cmon guys, you wont brick your ps3! Even author says so!
If you do what it says, simple and dont complicate, and you ll be fine.

I cant be switching right now as I dont have my dongle on me, otherwise I wouldnt ask for dumps.
As it looks Im gonna have to all by myself, as usual. From scratch to delivery.
Damn, and you then ask for new releases! Make an effort.
BahumatLord aint gona dump whole TB series for ya.

PS - Regarding my ex posting site. They do that. Limit access from other members to reach me.
I got many PMs a day and many members asking about me. I guess they got scared.
I checked there and here. Nothing in PM. Are you sure you send files to correct member.
I had 3 users here but couldnt post, so I registered again and again. Now finally all good.
Send to propJOE member. Thanks.

[sealhealy]

all i get are 2 small dumps same size each time. can't be right

[BahumatLord]

@propjoe - I looked at the dumps in a hex editor - they're not right for the games. I'm getting the same 2 dumps no matter what I try. I honestly don't think they work with the TB dongle inserted or if it does it's for a version earlier than 2.5 which is useless since all of that's been patched anyway.

I'm not done yet. I've got a few more things to try. But yeah, it's pretty sad only a couple people are attempting to do something with this. Very disappointing

[tpryor]

somebody tried deank's discboot, or does this not work with true blue? as i can remember it does not use any payload

[BahumatLord]

yes I tried - only dumps with dongle not inserted

[Shaitan]

I gave it a try for a couple of hours last night but still only the same 2 dumps, I don't have access to my laptop ATM but do you think swapping out the eboot of multiman or another hdd based app to create the dumped eboot then using the xmb file manager to copy it would work, at least we'd be able to rule out the overwriting idea.

[BahumatLord]

might be worth a try but while I was working with it I noticed that it would only dump correctly on apps that loaded all the way. All the games I was trying wouldn't boot at all. You can't dump the memory if there's nothing in the memory if that makes sense

I've spent a few hours with it on different firmwares and even switched to DEX again - no joy on my end

[BahumatLord]

also if you have XMBM+ installed you can check if the file is there before loading multiMAN. I've done it a couple times after trying to do a TB game and there was no file. Then again I never got around to remarrying my bluray drive. I occasionally get the 80010009 error. Maybe that's what's preventing these games from loading. IDK. It'd be nice if we had more people testing. Did you ever get around to remarrying yours?

[Shaitan]

Yeah I wasn't really hopeful but worth a shot. I never had to remarry my drive, it didn't work in DEX of course but when I switch over to a CEX firmware blurays work fine.

[vronz]

FINAL FANTASY XIII-2 - (BLES01269) - **No proper patch available elsewhere**

what you mean by that, because at least clean backup + 4 sprx files from TB patch + the fixed eboot released by Chinese hacker:

http://psx-scene.com/forums/content/...a-eboots-2353/

works dongle-free and the whole game can be finished excluding one single puzzle, which freezes, but that i believe is not due to the fix, but due to some bug in the game that was solved in the next updates - after all current patch is version 1.06.

BTW, maybe i'm wrong, but i believe there was fix for the PSN either by propJoe or some of the others releasing PSN fixes - Duplex or EXEtrimAll. however, one very good organized forum thread by propJoe is gone and i can't check that. i don't know what happened to that forum thread - maybe propJoe deleted it for some reason.

[BahumatLord]

What I meant was there's no 100% working regular 3.55 patch. You can play it 100% on TB (I've done it) but a proper patch for everyone else is still needed. I've got a google cached copy of propjoe's page. He never worked on FFXIII-2

[sealhealy]

would we be able to get anything useful from Cobra USB with this eg. dump multiman MMCM?
There still some good features there for cobra users only.
ISO loading, Split file loading from ext, PS2 & PSP emu etc.
I'd be willing to try if it would be any use.

[BahumatLord]

Yeah I wasn't really hopeful but worth a shot. I never had to remarry my drive, it didn't work in DEX of course but when I switch over to a CEX firmware blurays work fine.

I don't have any bluray movies (I've been watching digital movies for years), but after going back to CEX and I try to boot an original game disc it errors out. I can back it up and play it fine, just not from disc. It's a 3.15 game so no patch was ever needed. I get the 80010009 error meaning bad bluray but mine was never busted

@sealhealy - It could be worth a shot like dumping the different emulators it supports - never hurts to try

[sealhealy]

will try tomorrow after work

[Shaitan]

I don't have any bluray movies (I've been watching digital movies for years), but after going back to CEX and I try to boot an original game disc it errors out. I can back it up and play it fine, just not from disc. It's a 3.15 game so no patch was ever needed. I get the 80010009 error meaning bad bluray but mine was never busted

Maybe something happened when you we're getting your console keys but I'm pretty sure we did the same thing. I was worried about blurays not working when I converted to DEX but after going back to CEX blurays, dvds and games work fine. Let me know if you try to remarry and hopefully you only need to do it once.

[vronz]

What I meant was there's no 100% working regular 3.55 patch. You can play it 100% on TB (I've done it) but a proper patch for everyone else is still needed.

i see, that's a confirmation the few crashes with the currently existing 3.55 fix are caused by the fix and not as i believed bugs in the game that are solved with the updates to newer versions like 1.06

I've got a google cached copy of propjoe's page. He never worked on FFXIII-2

it's good that you have cached of propjoe's page. so, it's most likely i'm mistaken - probably some of the PSN releases were about FF and that made me confused it with fix for FFXIII-2.

[BahumatLord]

I need someone to compile this - I'm not set up to do it. It's time to pitch in guys. I know somebody has PSL1ght installed

// Author: Shadoxi
// Modified: :)

// Backup the original /dev_flash/sys/external/libsysutil_np_trophy.sprx to /dev_usb00
// Replace /dev_blind/sys/external/libsysutil_np_trophy.sprx by this sprx


#include <stdio.h>
#include <stdlib.h>

#include <cell/error.h>
#include <cell/cell_fs.h>

#include <sys/process.h>
#include <sys/paths.h>
#include <sys/prx.h>
#include <sys/tty.h>

SYS_MODULE_INFO (sceNpTrophyhook, 0, 1, 0 );
SYS_MODULE_START( _start );
SYS_MODULE_STOP ( _stop  );

SYS_LIB_DECLARE( sceNpTrophyhook, SYS_LIB_AUTO_EXPORT | SYS_LIB_WEAK_IMPORT );
SYS_LIB_EXPORT ( loader_sprx, sceNpTrophyhook );

int _start(void);
int _stop(void);
void DumpELF_Payload(void);
void loader_sprx(const char* PATH_PRX);

static void write_message (char const * message)
{
	unsigned int write_length;
	char const * end;
	for (end = message; *end != '\0'; ++end);
	sys_tty_write(SYS_TTYP_PPU_STDERR, message,end - message, &write_length);
}

void DumpELF_Payload(void)
{
	write_message("Dumping ELF from RAM...\n");
	int fd;
	uint64_t nread;
	uint64_t ptr= 0x00010000ULL;		//ELF offset in RAM;
	uint64_t sizeelf = 35*1024*1024;	//Need a way to get size of ELF

	char dump_path[30]="/dev_usb00/RAMDUMP-00.BIN";
	for(uint8_t i=0; i<100; i++)
	{
		dump_path[18]=0x30+i/10;
		dump_path[19]=0x30+i%10;
		if (cellFsOpen(dump_path, CELL_FS_O_RDONLY, &fd, NULL, 0) != CELL_FS_SUCCEEDED)
		{
			cellFsOpen(dump_path, CELL_FS_O_CREAT|CELL_FS_O_RDWR|CELL_FS_O_TRUNC, &fd, NULL, 0);
			cellFsWrite(fd, (void*)ptr, sizeelf, &nread);
			cellFsClose(fd);
			return;
		}
		else
			cellFsClose(fd);
	}
	return;
}

void loader_sprx(const char* PATH_PRX)
{
	sys_prx_id_t prx_id ;
	write_message ("Loading original prx... ");
	prx_id = sys_prx_load_module(PATH_PRX, 0, NULL);
	if (prx_id <= CELL_OK) 
	{
		write_message ("Failed!\n");
		return;
	} 
	else
		write_message ("Done!\n\nStarting module... ");

	int modres;
	if(sys_prx_start_module( prx_id, 0, NULL, &modres, 0, NULL) != CELL_OK)
		write_message ("Failed!\n");
}

int _start(void)
{
	write_message ("By shadoxi\n");
	DumpELF_Payload();

	// place here original libsysutil_np_trophy.sprx
	loader_sprx("/dev_usb00/libsysutil_np_trophy.sprx");

	return SYS_PRX_RESIDENT;
}

int _stop(void)
{
	return SYS_PRX_STOP_OK;
}